Apple's defenses are real. They were also never meant to be the only layer between a Mac user and a convincing scam.